Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-3716 EUVD-2018-0291GHSA-jrhj-2j3q-xf3v

Stored Cross-Site Scripting in simplehttpserver

Published Jun 7, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: simplehttpserver node module Package: simplehttpserver Ecosystem: npm

Description

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

Affected products

VendorProductAffectedFixed
HackerOne simplehttpserver node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm simplehttpserver < 0.1.0 0.1.0 GHSA-jrhj-2j3q-xf3v

References